| 标题 | Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon Command Injection |
|---|
| 描述 | A command execution vulnerability exists in the Tenda HG10 AC1200 Dualband Wi-Fi xPON ONT router.
The vulnerability resides in the boa web server’s formSamba interface and is caused by improper handling of the user-supplied serverString parameter. Due to the absence of adequate input validation and filtering, an attacker can inject arbitrary system commands through specially crafted requests. Exploitation of this vulnerability allows an unauthenticated attacker to execute arbitrary commands on the affected device, potentially leading to full compromise of the router.
The application retrieves the serverString value directly from user input using the boaGetVar function and embeds it into a shell command without sufficient validation or sanitization. As a result, attackers can inject malicious commands into the parameter, which are then executed by the system.
By exploiting this vulnerability, an unauthenticated attacker can execute arbitrary system commands on the target device, potentially gaining full control over the router. |
|---|
| 来源 | ⚠️ https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/HG10/formSamba-serverString-command.md |
|---|
| 用户 | Abcd1234 (UID 94604) |
|---|
| 提交 | 2026-01-17 06時54分 (9 月前) |
|---|
| 管理 | 2026-01-30 08時51分 (13 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 343481 [Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon Boa Webserver /boaform/formSamba serverString 权限提升] |
|---|
| 积分 | 20 |
|---|